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/ tCXmp"ItffenTjfsctarer Root Trusts cr Data: 

I > UPID/UTID Unencrypted !D Data 
! > gMID UPID/UTID Signed by CMPA TO 

> CMOS CM Object String Signed by CMPA TO 

> CPfDCM CryptoPrint Signed by CMPA TO 

> CMPA TO Signed encapsulated X.509 

> CMPVO ChipMan Permanent Validity Object 

> PMOBS Physical Product/Entity Manufacturer Object Binding 
Socket 



First layer of N 
embedded trust 




/ "Pfiy^rarproeruci/Errtity Manafa^tifreT "Rc^rmisieri 

I Data; 

I > PMID UPID/UTID Signed by PMPA TO 

j > PMOS PM Object String Signed by PMPA TO 

> CPIPPM CryptoPrint Signed by PMPA TO 

, > PMPA TO Signed encapsulated X.509 

I > PMPVO ProdMan Permanent Validity Object 

I > OOBS Ownership Object Binding Socket 



Owner/End User Root Trusted Data; 

> OMID UPID/UTID Signed by OMPA TO 

> OMOS OM Object String Signed by OMPA TO 

> CPIDOM CryptoPrint Signed by OMPA TO/ 

> OMPA TO Signed encapsulated X.509 ( VO 

> OPVO Owner Permanent Validity Object 

> ORTONS Owner Root TONS TO 

> OTONSPVO Owner TONS Permanent Validity Object N 

> UOBS Usage Object Binding Socket 



Owner/ 
End User 
Root TONS 
Trusted 
Object 



Owner/ 
End User 
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